Vulnerability Details CVE-2009-4674
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.8%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2009-4674
-
cpe:2.3:a:mole-group:bus_ticket_script:-
-
cpe:2.3:a:mole-group:sky_hunter_airline_ticket_sale_script:-